Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ViDrmvWfL5LIVj-XyqsPPbvczv8.roa
File: ViDrmvWfL5LIVj-XyqsPPbvczv8.roa (raw, json)
Hash identifier: 9JKJxan4KFZxxtzsEcV5dR0cr/j6Q/+22J1dmL/oei4=
Subject key identifier: 56:20:EB:9A:F5:9F:2F:92:C8:56:3F:97:CA:AB:0F:3D:BB:DC:CE:FF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01850788092AA065E1E2D5CBCEBB484B9A9B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ViDrmvWfL5LIVj-XyqsPPbvczv8.roa
Signing time: Mon 12 Dec 2022 18:10:33 +0000
ROA not before: Mon 12 Dec 2022 18:10:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:07:88:09:2a:a0:65:e1:e2:d5:cb:ce:bb:48:4b:9a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 12 18:10:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5620eb9af59f2f92c8563f97caab0f3dbbdcceff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:31:fc:bc:26:b0:b1:78:f4:aa:24:ca:b2:bc:
3d:aa:83:ef:9b:b2:86:af:50:2c:77:3c:4c:1d:99:
fe:19:fc:10:98:68:8a:8e:87:bc:5d:d4:6a:d5:60:
5f:79:f0:67:a2:db:fa:c0:27:37:1f:7d:21:14:32:
e9:08:22:e5:90:66:be:5e:9e:06:8f:56:6b:29:25:
91:13:c2:f5:3b:d4:9b:fb:fe:44:a0:e5:20:50:84:
e6:f2:97:26:71:ec:35:1f:aa:5e:67:02:8c:ce:40:
65:7c:2d:6e:c7:5d:ca:c5:eb:ff:df:94:c8:69:c5:
2e:26:47:79:49:2c:df:f0:b4:ee:f5:cc:83:d5:18:
01:b4:86:0d:12:19:32:64:a7:51:46:68:ef:cf:0c:
26:0e:b6:d7:92:f5:a2:b6:1e:8c:12:0a:49:69:8c:
df:c2:63:8b:30:36:e0:26:d2:96:5d:60:56:a5:88:
db:c5:b8:96:76:ae:ba:14:7a:1b:93:bf:17:22:7d:
4e:65:e0:e1:f5:08:a2:b4:38:3b:32:86:bd:ca:08:
7e:39:25:8f:2e:c9:38:14:e2:07:eb:b4:94:e6:5c:
2b:75:4e:db:b7:8f:82:5a:06:e0:52:42:5a:34:a7:
66:11:f6:f4:23:b0:8d:3c:db:58:a0:a3:0c:36:97:
a8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:20:EB:9A:F5:9F:2F:92:C8:56:3F:97:CA:AB:0F:3D:BB:DC:CE:FF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ViDrmvWfL5LIVj-XyqsPPbvczv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:1f:f0:22:af:1d:6f:c0:98:00:6e:02:82:d2:2c:cd:95:c0:
87:b6:94:b8:3d:9c:bf:89:8f:9b:73:bc:94:ea:8b:1c:f9:c0:
0a:73:00:dd:0e:21:00:51:2d:9a:44:54:c9:57:1d:1b:ff:72:
91:e0:8f:f2:5d:b8:61:d7:63:2a:22:c2:8c:c6:9c:dd:cc:e4:
1f:65:9e:ee:cc:a3:5e:75:4b:19:48:74:03:02:58:ed:6e:ae:
78:17:59:7e:f2:59:b1:0f:00:91:11:64:09:7c:76:b2:df:d8:
c4:73:76:56:d3:71:1f:d4:b4:57:91:58:6d:e5:99:29:d2:6e:
b0:00:1a:c9:f3:dc:47:9b:04:c6:58:c5:80:8d:59:65:10:48:
72:a8:6e:0c:04:f9:60:ce:51:18:29:6d:59:4d:61:3b:e6:80:
cc:7e:06:4a:19:0a:2a:c3:2b:91:b4:63:56:4d:c1:76:cd:64:
ee:8d:08:10:e4:40:6f:01:28:a6:0f:e2:86:d2:c8:03:91:3e:
82:45:9f:81:bb:a5:c0:1a:69:35:6b:34:39:84:d0:91:b2:15:
a3:7f:45:1a:a1:e7:e0:4d:78:b3:1c:b2:30:96:28:bf:1b:c7:
38:63:dc:31:74:08:11:5c:a4:54:f3:14:d3:5e:4a:f3:70:51:
7a:d4:f3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:27:38 2025 by rpki-client